Blog: Protect Signing Secrets for Tekton Chains using Confidential Computing

What is Tekton Chains? Tekton Chains, a part of the Tekton project, provides tools to generate, store, and sign provenance for artifacts built with Tekton Pipelines. Technically it’s a Kubernetes Custom Resource Definition (CRD) controller that allows you to manage your supply chain security in Tekton. Chains observes Tekton Pipelines and generates provenance for the artifacts built the Pipelines. The following diagram from the Tekton Chains tutorial shows the Tekton Chains workflow Src: https://tekton.